org.apache.tomcat.embed:tomcat-embed-core vulnerabilities (Root)
52 vulnerabilities.
-
org.apache.tomcat.embed:tomcat-embed-coreRoot AIKIDO-2026-915093 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root No score -
org.apache.tomcat.embed:tomcat-embed-coreRoot AIKIDO-2026-388833 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root No score -
org.apache.tomcat.embed:tomcat-embed-coreRoot AIKIDO-2026-116174 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root No score -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Redirect after FORM auth may bypass method specific constraints 9.1 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Limited replay attack possible with DIGEST authentication 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Bypass longest prefix security constraint 9.1 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: HTTP/2 request headers not validated 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: WebSocket authentication header exposure 7.3 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled 6.5 Medium -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Incomplete escaping of JSON access logs 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Fix for CVE-2025-66614 is incomplete 5.3 Medium -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled 9.1 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: TLS cipher order is not preserved 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Occasionally open redirect 6.1 Medium -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Request smuggling via invalid chunk extension 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Client certificate verification bypass due to virtual host mapping 9.1 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS 5.3 Medium -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: console manipulation via escape sequences in log messages 9.6 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: session fixation via rewrite valve 6.5 Medium -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: h2 DoS - Made You Reset 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: DoS via excessive h2 streams at connection start 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: DoS via integer overflow in multipart file upload 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows 8.4 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Security constraint bypass for pre/post-resources 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: FileUpload large number of parts with headers DoS 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Security constraint bypass for CGI scripts 7.3 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: RCE due to TOCTOU issue in JSP compilation 9.8 Critical -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Request/response mix-up with HTTP/2 6.5 Medium -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Denial of Service 8.6 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: HTTP/2 excess header handling DoS 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: HTTP/2 header handling DoS 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: HTTP request smuggling via malformed trailer headers 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: AJP response header mix-up 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: Fix for CVE-2023-24998 is incomplete 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High -
org.apache.tomcat.embed:tomcat-embed-coreRoot Apache Tomcat: JsonErrorReportValve escaping 7.5 High - Show olderLoading…